Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File:                     KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier:          m3m6F13/Xt8LcjD4n9FyTXCcIgpAUG0BPEpDN9hMsu8=
Subject key identifier:   B6:55:94:1A:E5:E9:03:07:9F:FD:DA:42:B4:11:BB:9E:50:36:2B:10
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer:       /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial:       018F885B39FD870E3EF7CFD163227D7BF184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number:          0859
Signing time:             Fri 17 May 2024 21:00:31 +0000
Manifest this update:     Fri 17 May 2024 21:00:31 +0000
Manifest next update:     Sat 18 May 2024 21:00:31 +0000
Files and hashes:         1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: 2xL/NozB6d8tr0hgndDeol5zIVrXreb1QQlnK21QzZU=)
                          2: n6IFJHI1wgHJpFBNv0yyZ2AxNVE.roa (hash: yoCa6ujnGAHPSNyMUR+FnRUTSoH9h4/QJTJ3WKwIUSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:39:fd:87:0e:3e:f7:cf:d1:63:22:7d:7b:f1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
        Validity
            Not Before: May 17 21:00:31 2024 GMT
            Not After : May 18 21:00:31 2024 GMT
        Subject: CN=b655941ae5e903079ffdda42b411bb9e50362b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:57:21:a8:c2:fa:5c:55:33:99:ef:1c:50:
                    17:b3:42:a3:d8:87:76:3a:93:8a:84:72:f0:76:74:
                    26:02:bb:86:9a:97:4a:b1:60:3f:ee:29:09:39:8f:
                    5d:96:bd:96:c9:f6:b8:f4:7c:45:5d:b3:0b:e8:98:
                    5a:78:05:2f:ab:49:ae:1d:e7:7f:92:d3:88:42:98:
                    32:d4:24:50:c8:40:07:87:92:a0:5f:c4:06:44:c9:
                    1e:91:7c:cf:96:b6:46:74:a9:aa:88:f3:fd:28:38:
                    85:c8:1f:84:94:8d:a5:17:2b:e2:4d:7d:6f:bc:3e:
                    50:70:0c:2d:e4:59:7d:ea:ad:3b:12:31:61:b2:e1:
                    c3:5b:30:c2:77:59:80:21:fa:1e:9c:4c:70:7f:f0:
                    1e:fe:18:26:a5:d9:59:22:86:02:ac:06:f0:e3:8f:
                    ba:61:69:49:08:81:78:cd:9c:40:1b:16:14:f5:9a:
                    ff:6b:5b:8d:82:f0:b9:2c:99:d0:88:8f:21:2a:52:
                    b1:f4:9e:ba:ef:ac:2d:2f:9d:01:20:ff:03:36:39:
                    d1:39:d1:0c:7d:6a:32:d4:7b:a5:20:e8:b4:7b:40:
                    a6:89:4b:34:3d:68:57:45:e8:ec:2c:30:bc:27:08:
                    74:92:83:7c:69:da:80:71:07:60:92:72:ac:23:0e:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:55:94:1A:E5:E9:03:07:9F:FD:DA:42:B4:11:BB:9E:50:36:2B:10
            X509v3 Authority Key Identifier:
                keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:29:74:0e:f7:3b:4f:f9:69:f7:e6:2f:cd:39:19:8b:9c:
         7c:9c:f1:02:8e:3b:d1:22:44:87:f8:76:09:b3:89:5f:71:d9:
         21:1c:d1:f7:f2:f9:08:e7:c0:a7:4f:1a:ae:cc:6a:9b:30:6b:
         9a:69:06:20:f0:1a:76:26:d3:f8:0d:fc:59:fd:d8:b4:2b:44:
         09:03:10:83:2b:24:dc:9a:ef:69:48:f6:95:9c:2b:21:59:87:
         16:80:d3:75:31:5f:6c:08:ab:4e:0f:d6:64:59:a1:1c:27:a2:
         3f:62:95:c9:0a:e7:2a:74:91:42:8b:3d:51:e6:ae:62:31:15:
         b6:9a:e7:f5:2a:9b:a1:9c:73:d6:33:b1:a8:1f:f6:19:27:c1:
         39:66:f6:24:01:d1:ab:13:a3:41:a0:32:7b:af:be:5c:da:54:
         00:1a:2c:b0:a1:0d:d1:a3:1c:ac:32:4a:51:7a:8f:59:c8:a5:
         45:d0:70:74:1b:a4:49:99:08:28:e1:bb:79:a9:86:62:7a:fd:
         20:de:7e:e8:2b:cb:37:11:19:48:36:09:29:75:66:8a:91:3a:
         44:db:f7:de:f3:21:70:aa:8a:94:7c:6b:0f:13:d8:da:28:2b:
         ac:99:f3:b6:8b:b5:fc:03:b4:4d:8a:cc:53:e4:15:05:d0:b4:
         71:96:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:22:33 2024 by rpki-client on console-ams.rpki-client.org